开源镜像站
帮助
动态
GitHub
index
:
lwn.git
alabaster
automarkup
doc/4.4
doc/4.8-fixes
doc/4.9
doc/asciidoc
doc/sphinx
docs-fixes
docs-mw
docs-next
docs-next-merge
header-removal
master
next
Linux kernel documentation tree maintained by Jonathan Corbet
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
2016-07-26
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...
Linus Torvalds
2016-07-20
qstr: constify dentry_init_security
Al Viro
2016-07-12
apparmor: fix arg_size computation for when setprocattr is null terminated
John Johansen
2016-07-12
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
Vegard Nossum
2016-07-12
apparmor: do not expose kernel stack
Heinrich Schuchardt
2016-07-12
apparmor: fix module parameters can be changed after policy is locked
John Johansen
2016-07-12
apparmor: fix oops in profile_unpack() when policy_db is not present
John Johansen
2016-07-12
apparmor: don't check for vmalloc_addr if kvzalloc() failed
John Johansen
2016-07-12
apparmor: add missing id bounds check on dfa verification
John Johansen
2016-07-12
apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task
Jeff Mahoney
2016-07-12
apparmor: use list_next_entry instead of list_entry_next
Geliang Tang
2016-07-12
apparmor: fix refcount race when finding a child profile
John Johansen
2016-07-12
apparmor: fix ref count leak when profile sha1 hash is read
John Johansen
2016-07-12
apparmor: check that xindex is in trans_table bounds
John Johansen
2016-07-12
apparmor: ensure the target profile name is always audited
John Johansen
2016-07-12
apparmor: fix audit full profile hname on successful load
John Johansen
2016-07-12
apparmor: fix log failures for all profiles in a set
John Johansen
2016-07-12
apparmor: fix put() parent ref after updating the active ref
John Johansen
2016-07-12
apparmor: add parameter to control whether policy hashing is used
John Johansen
2016-07-12
apparmor: internal paths should be treated as disconnected
John Johansen
2016-07-12
apparmor: fix disconnected bind mnts reconnection
John Johansen
2016-07-12
apparmor: fix update the mtime of the profile file on replacement
John Johansen
2016-07-12
apparmor: exec should not be returning ENOENT when it denies
John Johansen
2016-07-12
apparmor: fix uninitialized lsm_audit member
John Johansen
2016-07-12
apparmor: fix replacement bug that adds new child to old parent
John Johansen
2016-07-12
apparmor: fix refcount bug in profile replacement
John Johansen
2016-07-09
Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...
James Morris
2016-07-08
Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...
James Morris
2016-07-08
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
Vegard Nossum
2016-07-07
Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...
James Morris
2016-07-05
evm: Translate user/group ids relative to s_user_ns when computing HMAC
Seth Forshee
2016-06-30
Merge branch 'd_real' of git://git.kernel.org/pub/scm/linux/kernel/git/mszere...
Al Viro
2016-06-30
ima: extend the measurement entry specific pcr
Eric Richter
2016-06-30
ima: change integrity cache to store measured pcr
Eric Richter
2016-06-30
ima: redefine duplicate template entries
Eric Richter
2016-06-30
ima: change ima_measurements_show() to display the entry specific pcr
Eric Richter
2016-06-30
ima: include pcr for each measurement log entry
Eric Richter
2016-06-30
ima: extend ima_get_action() to return the policy pcr
Eric Richter
2016-06-30
ima: add policy support for extending different pcrs
Eric Richter
2016-06-30
integrity: add measured_pcrs field to integrity cache
Eric Richter
2016-06-27
calipso: Add a label cache.
Huw Davies
2016-06-27
netlabel: Pass a family parameter to netlbl_skbuff_err().
Huw Davies
2016-06-27
calipso: Allow the lsm to label the skbuff directly.
Huw Davies
2016-06-27
calipso: Allow request sockets to be relabelled by the lsm.
Huw Davies
2016-06-27
netlabel: Prevent setsockopt() from changing the hop-by-hop option.
Huw Davies
2016-06-27
calipso: Set the calipso socket label to match the secattr.
Huw Davies
2016-06-24
selinux: Add support for unprivileged mounts from user namespaces
Seth Forshee
2016-06-24
Smack: Handle labels consistently in untrusted mounts
Seth Forshee
2016-06-24
Smack: Add support for unprivileged mounts from user namespaces
Seth Forshee
2016-06-24
fs: Treat foreign mounts as nosuid
Andy Lutomirski
[prev]
[next]